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PREPACE 

As  this  paper  waa  awaiting  publication,  the  author  realized  that 
the  steady  state  difference  approach  could  also  have  been  applied  to  the 
case  of  non-zero  installation  times  to  get  exact  answers.  For  some  problems, 
but  not  all,  the  approach  could  serve  as  the  basis  of  solution  algorithms. 

A future  paper  will  pursue  this  line  of  approach,  giving  the  details, 
and  using  the  difference  equations  approach  to  evaluate  the  approximations 
provided  in  the  paper. 
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I.  DTTRODUCT ION 

1.1  Problem 

This  paper  reports  progress  to  date  in  evaluating  expected  steady 
state  system  availability  in  a single  component  (type)  system  with  parallel 
redundancy,  when  there  is  a pool  of  spare  components.  There  may  be  several 
systems  supported  by  this  same  pool.  The  pool  is  managed  by  a supplier 
following  an  (S,S-1)  inventory  policy  under  continuous  review. 

The  basic  sequence  of  events  is:  component  falls;  spare  component 
is  obtained,  immediately  if  one  is  available;  component  is  Installed.  Be- 
cause of  redundancy,  the  system  need  not  be  down  while  this  is  occurring. 

If  the  pool  of  spares  is  not  colocated  with  the  systems,  ship  time  is  con- 
ceptually considered  part  of  installation  time.  When  a component  falls,  a 
good  component  is  made  available  to  the  pool  manager  a resupply  time  later. 
This  time  represents  time  to  repair  the  component,  or  order  it  if  it  is  not 
repairable.  For  ease  of  exposition,  we  assume  an  unlimited  number  of  re- 
pair facilities. 

Two  alternative  basic  premises  are  considered: 

"Cold  Standby"  - Component  only  falls  when  it  is  being  used, 
and  only  one  of  the  parallel  components  is 
used  at  a time. 

"Warm  Standby"  - All  of  the  parallel  components  are  in  use  and 
subject  to  failure  at  any  given  time,  at  the 
same  rate. 

1.2  Accomplishments  Relative  to  Earlier  Work 

Surprisingly,  considering  the  important  practical  applications, 
the  problem  addressed  in  this  paper  has  received  relatively  little  attention 
in  the  literature.  Forry  [3]  reports  on  a model,  ACCLOGTROM,  with  ante- 
cedents dating  back  to  the  1960's,  which  not  only  evaluates  system  avail- 
ability under  more  general  system  structures  than  are  considered  here,  but 
optimizes  Inventory  Investment  as  wall.  However,  this  model  rests  on  an 
assumption  which  is  Incorrect  and  dangerous,  as  discussed  in  Section  3.5. 
Similarly,  Bain  [2]  considers  evaluation  of  system  availability  in  a system 
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with  redundancy  and  supply,  and  allows  for  partial  degradation,  but  his 
results  do  not  rest  on  a rigorous  foundation  and  could  now  be  recast  In 
more  precise  form. 


[Amongst  more  rigorous  expositions,  Gopalan's  article  [A]  comes  closest 

to  the  subject  treated  here.  With  proper  interpretation  of  his  work,  a 
special  case  of  our  work  corresponds  to  a special  case  of  his;  namely, 
the  case  of  only  one  system  supported  by  the  supply  pool  and  zero  lnstalla- 
tlon  time.  Gopalan  assumes  only  one  repair  facility.  Natarejan  and  Rao  [3] 
allow  multiple  repair  facilities,  but  In  other  ways  their  article  Is  not  as 
general  as  Gopalan's,  and  cannot  be  used  to  model  warm  standby  with  a 
supplier.  Both  the  articles  cited  are  representative  of  a number  which 
have  appeared,  primarily  In  Operations  Research,  pertaining  to  availability 
of  systems  with  redundancy  and  repair. 

To  summarize  the  contribution  of  this  paper:  for  the  first  time  exact 
results  are  developed,  for  both  cold  standby  and  warm  standby,  when  installa- 
tion time  Is  zero,  but  there  is  more  than  one  system  supported  by  a pool 
manager.  Approximations  are  developed  for  non-zero  Installation  times. 

It  Is  our  expectation  that  the  results  will  provide  the  basis  for  constituting 
a more  accurate  alternative  to  ACCLOGTROM,  as  they  are  readily  Integrated 
into  a multi-component  (type),  multi-echelon  context.  It  is  our  hope  that 
the  approximations  presented  will  serve  as  something  to  "shoot  at"  In  de- 
veloping still  more  accurate  approaches  to  treating  problems  when  Installa- 
tion times  ere  significant. 


1.3  Notation 

General 

X - failure  rate  for 

a system  Cold  Standby 

a component  Warm  Standby 

y - supplier's  mean  resupply  time 
n - number  of  systems  supported  by  supplier 
c - number  of  components  per  system 
a - supplier's  stockage  parameter 
B - number  of  backorders  at  random  point  In  time 


Bj  - number  of  backorders  attributable  to  a system  I,  chosen 
at  random  (Bj  - B if  n ■ 1) 

U - probability  a system  is  unavailable,  l.e.  down,  in  steady 
state 

F(x;v)  - cumulative  Poisson  with  mean  v. 

Birth-Death  Process 

k - number  of  components  in  resupply,  i.e.  in  repair  or  on  order 

- arrival  rate  when  process  is  in  state  k 

- departure  rate  when  process  is  in  state  k 

Pk  - probability  process  is  in  state  k at  time  t,  calculated  as 
limit  u t-M 

Renewal  Oriented 

MTBF  - mean  time  between  failure 
MLDT  - mean  logistics  down  time 
MTI  - mean  time  to  Install  a component 
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"COLD  STANDBY" 


2.1  Exact  Formulas  When  MTI  “ o 

This  problem  may  be  modelled  as  a birth  death  process  as  has  been 
shown  in  the  literature.  Component  failures  are  births,  and  a death  occurs 
after  a service,  i.e.  a resupply,  time.  Sherbrooke  [9]  shows  that  a finite 
state  birth-death  process  with  state  dependent  arrival  and  service  rates, 
exponential  interarrival  time,  and  general  service  distribution  can  be 
modelled  exactly,  and  in  fact  state  probabilities  are  identical  to  those 
for  exponential  service. 

One  System  Supported.  If  there  is  only  one  system  supported,  we  have 
a special  case  modelled  as  an  M/M/c+s/c+s  queue.  In  general  queueing 
literature  it  is  Interpreted  to  mean  that  once  c+s  components  are  in  resupply, 
any  future  demands  are  "lost,"  i.e.,  do  not  affect  the  state  of  the  process. 

We  may  Interpret  it  as  meaning  that  if  there  are  c+s  units  in  resupply,  the 
system  is  down  and  additional  demands  cannot  occur.  For  this  process, 
cf  [5], 


(2.1.1) 


(*/«)  -M 


c+s 

I (A/u^/il 

i“o 


o to  c+s 


U 


'C+S 


Multiple  Systems  Supported:  Cannibalization.  For  n > 1,  things  get 
more  complex  unless  we  assume  cannibalization,  using  the  word  in  its  most 
general  sense  to  mean  we  manage  our  component  backorders  so  as  to  have 
the  fewest  possible  systems  down.  With  cannibalization  we  retain  the 
properties  of  a simple  birth-death  process;  i.e.,  the  state  of  the  process 
is  determined  by  the  number  in  resupply. 

In  particular,  if  there  are  up  to  s+n(c-l)  units  in  resupply,  the  number 
of  backorders  does  not  exceed  (n) (c-1)  and  under  cannibalization  there  are 
no  systems  down;  each  system  will  have  (c-1)  backorders.  If  there  are 
e+(n)(c-l)  + 2 units  in  resupply,  two  systems  will  be  down,  so  unavailability 
given  k ■ s + (n) (c-1)  + 2 is  2/n.  More  generally, 

5 

J 


X^  ■ nX  for  k ■ 0 to  s+(n) (c-1) 

X^  “ (n-m)X  for  k ■ s+(n)(c-l)  + m m - 1 to  n-1 

Uk  ■ kj*  for  all  k 

s+nc 

p is  determined  so  E p,  « 1 

o , rk 

k-o 

Multiple  Systems  Supported:  No  Cannibalization.  Let  us  clarify  what 
is  Involved  with  a case  where  n - 2,  c - 2.  With  cannibalization, 

X^  - 2X  ; k ■ 0 to  s+2 

X^  - X ; k ■ s+3 

Pk  • ky  ; all  k 

Without  cannibalization,  we  must  distinguish  p and  p , . where  "a" 

8tZ|B  8t4|D 

denotes  the  event  one  system  Is  down  and  "b"  the  event  no  systems  are  down. 
(For  k i s+2  we  have  no  indeterminancy).  Results  then  depend  on  the  pool 
manager's  Issue  policy. 

The  policy  of  most  Interest  Is  what  we  label  the  "smart"  policy  In 
which  backorders  are  filled  In  the  sequence  designed  to  minimize  number  of 
systems  down.  A set  of  steady  state  difference  equations  can  be  defined 
in  the  usual  form: 
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0 - [Probability  of  Leaving  State  k]  + [Probability  of 

Entering  State  k] 

and  the  steady  state  values  for  all  states  obtained.  In  particular, 
(2.1.3a)  0 — [A+(u)(s+2)]  P8+2>a  +2X/2  Pfl+1 

(2.1.3b)  0 — [2A  +(y)(s+2)l  Ps+2>b  +2A/2  ps+1  + (p)(s+3)  p^ 


Equations  (2.1.3)  reflect  these  observations:  when  one  component  is  back- 
ordered the  next  demand  is  equally  likely  to  come  from  either  system.  If 
3 components  are  backordered,  and  one  comes  back  from  supply,  it  will  be 
placed  on  the  down  system. 

Appendix  I gives  the  full  set  of  equations  and  develops  the  solution. 

The  analysis  can  in  principle  be  extended  to  general  n,c.  For  example,  for 
c > 2,  a smart  policy  would  be  to  satisfy  a backorder  on  the  system  with  the 
maximum  number  of  components  backordered, requiring  further  elaboration  on  the 
state  space.  The  analysis  gets  very  tedious,  but  is  sufficiently  structured  to 
offer  expectation  of  feasible  implementation  by  appropriate  computer  software. 

Bounds  on  system  availability  are  readily  obtained.  Results  based  on 
cannibalization  provide  an  upper  bound  for  system  availability  when  cannibali- 
zation is  not  used.  A lower  bound  may  be  derived  by  computing  backorders  B 
based  on  cannibalization  and  then  assuming  backorders  are  distributed  randomly 
among  systems.  While  system  availability  is  highest  under  cannibalization, 
total  failure  generation  is  therefore  highest  and  so  total  component  back- 
orders are  highest. 

In  computing  B^  under  the  assumption  of  random  distribution  of  backorders 
the  conditional  probability  Pr(BI  ■ j|B  ■ x)  can  be  approximated  as  the 
chance  of  j successes  from  a binomial  distribution  with  population  parameter 
x,  and  chance  of  success  of  1/n.  Pr(Bj  ■ J | B - x)  can  also  be  computed  more 
exactly,  recognizing  there  can  be  a maximum  of  c backorders  from  any  given 
system  by  combinatorial  analysis  as  shown  in  Appendix  II. 

2.2  Formulas  When  MTI  4 o 

One  System  Supported.  If  s ■ o,  the  MTI  may  simply  be  added  to  the 
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resupply  time.ij . As  a general  procedure  this  Is  erroneous.  For  example. 
It  Implies  that  so  long  as  a spare  Is  always  available,  the  system  will 
never  go  down,  which  Is  not  true.  It  can  fall  during  Installation. 

A different  approach  Is  suggested  for  constant  MTI: 

c 

(2.2.1)  U - I Pr(B-j)[l  - F (c-1- j ; (X)  (MTI)) ) 
j-o 


The  basis  for  this  equation  Is  that  the  number  of  components  not  functioning 
at  some  time  t equals  the  number  backordered  at  time  t - MTI,  plus  the 
number  which  fall  subsequently,  failures  being  exponential  as  long  as  the 
system  Is  up. 

The  sources  of  error  In  use  of  equation  (2.2.1)  are: 

a.  Calculation  of  the  distribution  on  B by  the  M/M/C+S/C+S  queue, 
section  2.1,  will  no  longer  be  exact  because  of  the  Impact  of  MTI  on  failure 
generations . 

b.  Calculation  of  failure  rate  In  the  Interval  (t-MTI,  MTI]  does 
not  allow  for  the  possible  Impact  of  components  being  Installed  at  time 
t-MTI.  They  may  cause  the  system  to  temporarily  go  down  In  the  Interval, 
before  c-j  component  failures  are  accumulated. 

More  generally,  when  multi-component  (type)  systems  are  considered. 

It  becomes  necessary  to  account  for  the  impact  on  demand  rate  of  component 

type  A of  system  down  time  caused  by  failure  of  component  types  B,  C 

Barlow  and  Proschan  [1]  offer  exact  results  In  the  context  of  systems  without 
redundancy  or  spare  pool.  It  seems  likely  to  us  that  In  the  problems  of 
the  nature  considered  here,  attention  will  have  to  focus  on  approximations 
based  on  adjustment  of  X for  down  time,  e.g.  by  setting  A'  ■ (A) (A),  where 
A Is  the  system  availability  to  be  achieved. 

Multiple  Systems  Supported.  Equation  (2.2.1)  Is  formally  generalized 
to 

c 

(2.2.1')  U - Z Pr(B  - j)[l  - F (c-l-j;  (X)(MTI)] 
j"° 

No  new  sources  of  error  are  Introduced  by  the  need  to  compute  the 
conditional  distribution  of  B^  given  B.  Under  cannibalization,  for  example. 


for  n ■ 5,  c ■ 2, 


Pr(BI  - l|B-l)  - 1/5 


Pr(Bj  ■ 1|B*7)  ■ 3/5  (the  first  5 backorders  are  distributed 

one  to  a system,  and  the  next  two  are  given  to  2 of  the 
systems  leaving  three  with  1 backorder) 


(one  system  has  1) 


Under  a smart  policy  the  conditionals  follow  directly  from  the  elaborated 
state  spare. 
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III.  WARM  STANDBY 


3.1  Exact  Formulas  When  MTI  - 0 

Results  obtained  for  cold  standby,  with  n-1  or  with  n > 1 and  cannibali- 
zation, hold  with  only  a redefinition  In  A^  required: 

(3.1.1)  ■ ncX  for  k ■ o to  s 

A^  - [nc  - (k-s)]A  for  k > s 

Similarly,  although  Issue  policy  does  not  affect  total  backorders,  as  It 
did  under  cold  standby,  the  same  elaboration  of  the  state  space  Is  still  re- 
quired to  treat  n > 1 and  the  smart  Issue  policy  - In  order  to  Infer  system 
availability  from  system  backorders. 

Under  FIFO  Issue  policy,  In  which  backorders  are  eliminated  In  the 
order  In  which  they  occur,  no  elaboration  of  state  space  Is  required.  Since 
this  Is  mathematically  so  convenient,  and  since  FIFO  Is  realistic  In  some 
situations,  we  will  consider  this  case  further. 

To  derive  Individual  system  backorders  from  total  backorders  - total 
backoriers  are  found  as  with  cannibalization  - set 

(3.1.2)  Pr(Bt  - c|B  - i ) - 

This  Is  an  application  of  the  theory  of  sampling  without  replacement.  Con- 
ceptually number  the  components  from  1 to  nc,  with  1 to  c being  on  system  I. 
The  probability  that  component  1 Is  on  backorder  given  B ■ j is  j/nc. 

The  probability  component  2 Is  on  backorder  given  component  1 was.  Is 
(j-l)/(nc-l) , etc.  Underlying  this  Is  that  each  of  the  nc  components  Is 
equally  likely  to  be  on  backorder,  and  that  knowing  how  j-i  of  ehe  backorders 
are  distributed  amongst  systems  tells  us  nothing  about  the  distribution  of 
the  remaining  1 backorders. 

3.2  Formulas  When  MTI  4 0:  Analogue  to  Cold  Standby 


I 


Results  obtained  for  cold  standby  hold,  provided  we  substitute  the 
appropriate  expression  for  number  of  component  failures  In  an  Interval  equal 
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to  WTI.  The  analogue  to  (2.2.1')  is: 

c c-1 

(3.2.1)  U - Z Pr(B  - j)[l  - F(0;(X)(MTI)]c  J 
j-o 

Sources  of  error,  corresponding  to  those  under  cold  standby  are: 

a.  Calculation  of  distribution  on  B,  from  which  B^  Is  determined. 

Is  no  longer  exact. 

b.  Some  of  the  c-j  non  backordered  components  may  be  In  the  process 
of  Installation  at  time  t-MTI. 

The  most  reasonable  adjustment  on  X to  account  for  the  Impact  of  MTI 
on  failure  generation  Is  to  set: 

<3-2-13  r ‘ <x>  IfSIsrT  ' <x>  -ri 

i + wrt 


i.e.  multiply  by  the  percent  of  time  the  component  Is  working,  given  that 
It  Is  not  on  backorder  . 

Under  FIFO,  calculation  of  the  general  distribution  on  Bj  is  done  by 
a more  complex  version  of  equation  (3.1.2). 


(3.2.2) 


Pr(BI  - m | B- J ) 


m 

(!)  " 


m 


1-1 


0(1-1) ) 

(nc-(l-l) ) 


c 

n 

i-nrt-1 


nc  - (1-1)  - 
nc  - (1-1) 


Again,  we  are  sampling  without  replacement.  Ignoring  (^)  for  a moment, 

the  rest  of  the  expression  is  the  probability  that  components  1 to  m are 

on  backorder,  and  m + 1 to  c are  not.  (c)  la  the  number  of  ways  of  dividing 

m 

the  c components  into  subsets  of  size  m (backordered)  and  size  c-m  (not 
backordered) . 

3.3  Formulas  When  MTI  4 0:  Alternative  Approach 

This  approach  utilizes  the  perspective  of  renewal  theory  to  relax  the 
requirement  that  MTI  be  deterministic.  Consider  the  state  of  an  Individual 
component  "slot"  on  a system.  A new  cycle  begins  whenever  a component  Is 
installed  In  the  slot,  and  the  process  then  passes  through  3 states: 
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t1 


Ll 


MTBF 

MLDT 

MTI 

*Installed 

Backordered 

Installation  Underway 

The  middle  state  may  be  zero  In  some  cycles;  recall  also  that  the  system 
may  be  up  even  though  a particular  component  is  in  the  backorder  or 
installation  states. 

Provided  the  time  in  each  state  is  Independent  of  what  transpired  in 
previous  cycles,  it  is  easily  shown  that  installations  comprise  the  renewal 
events  of  a renewal  process,  and  that  the  steady  state  percentages  of  time 
in  each  state,  or  probability  of  being  in  each  state,  are  equal  to  the 
mean  time  in  a state  divided  by  mean  time  between  renewals  (cf  Ross, 

Renewal  Reward  process) . 

Now  consider  the  same  process  where  we  "blot  out"  time  spent  on  back- 
order. Clearly,  the  percentage  of  time  in  the  installation  state,  given 
that  a slot  is  not  in  the  backordered  state  is  MTI/(MTI  + MTBF) . 

Defining  L as  the  number  of  components  of  system  I in  Installation, 
this  suggests  calculating 

c 

(3.3.1)  U - E Pr(BT-j)  PrO^-c-j) 

j-o 

“ 1 Pr<Bj"J)  + jjjgp)  J 

J-o 

Unlike  equation  (3.2.1)  we  are  Interested  in  B^  at  time  t,  not  t-MTI, 
and  we  need  make  no  assumption  about  the  distribution  of  MTI,  other  than 
it  be  Independent  for  each  component. 

This  approech  does  not  alter  the  problem  of  estimating  the  distribution 
on  B when  MTI  i 0.  Furthermore,  it  is  not  entirely  correct  to  assume,  as 
the  approech  does,  that  the  probabilities  of  being  in  the  installation 
state  are  independent  among  components. 

Dependence  is  occasioned  by  the  dependency  amongst  the  backorder 
states,  (cf  section  3.5) 

3.4  Formulas  When  MTI  ^ 0:  Comparison  of  Approaches 

Recognizing  that  both  approaches  are  approximations,  they  should  still 
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closely  agree  for  deterministic  Mil.  We  note  that  by  Taylor's  expansion. 


1 - F [0;(X)(MTI)]  - 1 - e<X)(Mri>  - (A) (MTI)  - 

4 

and  that  by  algebra  and  definition  of  MTBF  In  terms  of  A , 


+ Remainder  Term 


(MTI)  - VUiWl. 

MTI  + MTBF  ; (A)  (MTI)  + 1 


2 2 

Thus  the  difference  Is  a function  of  (A)  (MTI)  and  higher  order  terms. 

3.5  Approach  Based  on  Independence 

It  Is  very  convenient  to  treat  warm  standby  as  does  the  ACCLOGTROM  model 
[3]  by  calculating  average  logistics  down  time  and  then  assuming  complete 
Independence  between  components  of  what  state  they  are  In. 

Under  the  assumption,  with  components  In  parallel. 


(3.5.1)  U - ( 


MLDT  + MTI . 

MTBF  + MLDT  + MTIJ 


This  approach  was  tested  In  two  cases  where  exact  answers  were  available 
and  was  found  disastrous  (Appendix  III).  MTI  was  0 In  both  cases,  permitting 
an  exact  calculation,  and  n was  1. 

As  a verification  of  (3.3.1)  we  have  shown  that  It  leads  to  the  same 
results  as  3.5.1,  provided  B Is  taken  to  be  blnomlally  distributed,  with 
population  parameter  nc;  i.e.,  provided  the  Independence  assumption  were 
correct. 

4.  Conclusion 

We  have  shown  how  to  obtain  exact  solutions  for  steady  state  availability 
when  Installation  time  la  0.  These  solutions  depend  on  the  Issue  policy 
of  the  pool  manager,  and  whether  the  system  Is  operating  under  warm  standby 
or  cold  standby. 

Approximations  are  provided  whan  Installation  time  Is  not  0.  The  major 
problem  to  be  solved  in  refining  these  approximations  Is  how  to  account  for 
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the  Interaction  between  Installation  tine  and  failure  generation. 

While  the  problem  addressed  was  based  on  a real  world  problem  descrip- 
tion related  to  electronic  systems,  it  is  easy  to  imagine  some  variations 
in  the  assumptions  which  might  need  to  be  treated  in  other  contexts;  e.g. , 
diagnostic  time  is  significant,  all  redundant  components  must  be  installed 
at  one  time,  and  so  on. 
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APPENDIX  I 


SOLUTION  OF  AUGMENTED  DIFFERENCE  EQUATIONS 
The  difference  equations  up  to  state  pg  follow  a normal  birth/death 


process;  e.g. 


(Al«l)  0 - - (2X  + su)  p#  + (e+l)(p)  ps+1  + (2A)pB-1 


Hence,  for  k ■ 1 - > e+1. 


(Ala  2)  Pk  - P0  n 


‘l-l 


1-1 


- 21 


Wt  - (l)(u) 


We  can  also  write  these  difference  equations: 


(Ala  la)  0 - - ((s+3)(p)  ♦ X)  pa+3  + (s+A)(p)  pg+4 


+ (X)  Pe+2,a+(2X)  pe+2,b 


(Al. 3b)  0 - - (s+A) ( W)  pg+4  + X ps+3 


Substituting  for  pg+4  from  (3b)  Into  (3a) 

(Al.A)  0 -(a+3)pp8+3  + Xp8+2(8  + 2X  ps+2tb 

Substituting  for  pg+2  a *rom  (2.1.3a)  Into  (Al.A) 

(X) (A) 

(A1.5)  0 -(s+3)(p)  pg+3  ♦ ps+l 

+ (2x)P8+2,b 
16 
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APPENDIX  II 

A PROBLEM  IN  COMBINATORIAL  MATHEMATICS 


Problem 


Each  of  x backorders  Is  assigned  to  one  of  n systems.  We  Imagine  that 
the  backorders  are  numbered  from  1 to  x,  and  that  the  assignments  are 
made  sequentially  In  time.  We  are  Interested  In  the  probability  that 
System  I,  chosen  at  random,  has  j backorders  assigned.  The  assignment 
mechanism  Is:  assign  backorders  with  equal  probability  to  all  feasible 
systems,  where  a feasible  system  is  one  with  < c backorders  already  assigned. 

General  Procedure 

We  find  the  number  of  (assumed  equally  likely)  assignment  patterns,  where 
we  do  not  require  that  system  I have  j backorders.  Then  we  find  the  number 
given  this  restriction,  and  take  the  ratio.  A pattern  Is  distinguished  not 
only  by  the  number  of  backorders  for  each  system,  but  by  which  systems  are 
assigned  to  which  backorders,  l.e.,  both  backorders  and  systems  are 
distinguished. 

We  give  the  details  while  Illustrating  with  an  example  for  which 
n - 5,  c - 2,  x ■ 4,  and  J ■ 1. 

Find  Unrestricted  Number  of  Patterns: 

(1)  Identify  all  possible  groupings  of  backorders  among  systems, 
treating  backorders  and  systems  as  Indistinguishable.  Begin  with  groupings 
using  the  least  possible  number  of  systems.  In  our  example,  groupings  are: 

2-2-0-0-0  (2  systems  have  2 backorders  each) 

2-1- 1-0-0 
1-1-1— 1-0 

(2)  For  each  grouping  number  of  distinguishable  patterns  Is  found 
by  flTst  treating  backorders  as  Indistinguishable,  then  correcting.  For 
our  example: 

Feasible  Backorders  Correction  Total 

Grouping  Indistinguishable 


Total 


2- 2 -0-0-0 

<i> 

X 

(2> 

60 

2-1- 1-0-0 

(5)  <*) 

X 

<2> 

<21> 

360 

1-1-1-1-0 

<2> 

X 

❖ 

<?>  «*> 

120 

18 

540 

We  illustrate  with  grouping  2-1-1.  There  are  five  ways  to  pick  the  system 

4 

with  2 backorders.  There  are  (»)  ways  to  pick  which  2 of  the  remaining  A 

1 4 

systems  has  2 backorders.  There  are  (2)  ways  to  choose  which  of  the  A 

backorders,  now  treated  as  distinguishable,  go  with  the  system  with  2 

2 

backorders.  There  are  (^)  ways  to  choose  which  of  the  two  remaining  un- 
assigned backorders  go  with  the  first  of  the  remaining  two  unassigned  systems. 

Find  Conditional  Number  of  Patterns: 


Feasible 

Grouping 

Backorders 

Indistinguishable 

Correction 

Total 

2-1-1-0-0 

(A)  (3) 

x (2)  (J> 

1AA 

1-1-1-1-0 

<3> 

❖ <i>  <2i> 

96 

2A0 

We  illustrate  with  grouping  2-1-1.  We  know  system  1 must  account 
for  one  of  the  systems  with  1 backorder.  There  are  A ways,  therefore,  to 
pick  the  system  with  2 backorders,  and  3 systems  to  choose  from  to  be  the 
other  system  with  1 backorder.  Correction  logic  is  always  as  for  the  un- 
restricted case. 

Probability  ■ ■ .AA 

A 1 A 3 

Corresponding  Binomial  is  (p (j)  (j)  ■ • A1 

Source  of  Error 

Certain  patterns  are  actually  more  likely  than  others  due  to  the  con- 
straint on  total  backorders  from  any  one  system.  Consider  again  the  case 
where  n-5,  c-2  and  x-A,  and  label  the  systems  a,b,c,d,e  so  that  (a,b,c,-) 
represents  the  assignment  of  the  first  three  backorders  to  systems  a,b,c 
respectively,  with  the  fourth  as  yet  unassigned.  Then  (a,b,c,-)  and  (a,b,b,-) 
are  equally  likely  by  usual  multinomial  arguments.  However,  (a,b,b,d)  is 
more  likely  than  (a,b,c,d)  since  given  (a,b,b,-)  the  fourth  backorder  must 
be  a,c,d  or  e with  equal  probability,  while  given  (a,b,c,-),  the  fourth 
backorder  can  be  any  of  a,b,c,d  or  e. 


\ 
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APPENDIX  III 


EVALUATION  OF  INDEPENDENCE  ASSUMPTION 


The  case  of  warm  standby,  n - 1 and  c - 2,  was  rim  for  s - 0 and  1, 

and  a range  of  X.  MTI  was  0.  The  table  below  shows  the  exact  unavailability, 

and  the  ratio  of  the  estimates  based  on  independence  to  this  exact  value. 

* 

To  calculate  the  Independence  based  estimate,  the  following  equivalence  Is 
used: 


LPT 

LDT4MTBF 


E, (,) 
nc 


As  can  be  seen  from  the  table  below,  unavailability  based  on  Independence 
is  quite  low  for  a - 1,  but  exact  for  e - 0.  When  s - 0,  there  la  in  fact 
Independence  between  component  states  as  resupply  time  does  not  depend  on 
the  stock  position  of  a supplier. 


X Unavailabilities  Unavailability  Ratios 


8-0 

s-l 

s - 0 

s - : 

010 

.010% 

.000% 

1.00 

.01 

021 

.041% 

.001% 

1.00 

.03 

043 

.170% 

.005% 

1.00 

.06 

089 

.670% 

.040% 

1.00 

.13 

185 

2.43% 

.292% 

1.00 

.24 

383 

7.68% 

1.79% 

1.00 

.43 

795 

19.6% 

8.00% 

1.00 

.67 

^Bernard  Price  has  developed  a simple  proof  of  this  equivalence  (unpublished 
notes) . 
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APPENDIX  IV 


r 


INFINITE  SOURCE  APPROXIMATIONS 

Infinite  source  estimates  of  unavailability  are  calculated  by  basing 
total  backorders  on  the  Poisson.  The  Implication  of  infinite  source  is  that 
the  failure  rate  does  not  depend  on  the  number  in  repair. 

Cold  Standby:  Pr(B-J)  ■ p(j+s;nX')  where  p(x;y)  is  Poisson  function 

Warm  Standby:  Pr(B-J)  - p(J+s;ncA') 


A'  was  either  set  to  A or  based  on  exact  estimates  of  system  down  time. 

Four  cases  were  tried  to  probe  the  accuracy  of  infinite  source 
approximations : 

Cold  Standby:  n - 1;  c - 2;  8*0  and  s - 1. 

Warm  Standby:  n-l;c-2;s-0  and  s ■ 1. 


Single  system  cases  were  chosen  because  they  may  be  most  common  when 
built  in  redundancy  is  extensive,  they  are  easiest  to  model,  and  one  might 
expect  infinite  source  approximations  to  work  worst  when  n-1.  MTI  was 
set  to  0 for  simplicity  and  to  permit  exact  answers  for  comparison . 

When  A was  adjusted,  it  was  done  as  follows: 


Cold  Standby: 

A'  - (A) (1-U) 

Warm  Standby: 

1 

A'  - (A)  A 

j + MLDT 

MLDT  - 1 s-0 

MLDT-fgi-  .>0 

E(D)  - expected  failures  per  unit  time 


- 2A  * [1  - U - y Pr(B-l] 
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Exact  values  of  U,  Pr(B-l)  were  used. 

Included  In  this  Appendix  are  three  tables  showing,  respectively: 
exact  unavailabilities,  ratios  of  unavailabilities  calculated  by  simple 
Poisson  to  exact,  ratio  of  expected  backorders  calculated  by  simple  Poisson 
to  exact. 

Reviewing  the  tables.  It  Is  apparent  the  Infinite  source  approximation 
breaks  down  under  warm  standby,  calculation  of  unavailability,  even  though 
calculation  of  expected  backorders  Is  reasonably  good.  Adjusted  X helps 
somewhat.  Under  cold  standby,  there  is  no  problem  so  long  as  system 
reliability  is  high,  and  adjusting  X,  In  a simple  fashion,  does  not  help. 

A rationalization  of  the  results  is  that  under  cold  standby  demand 
stops  when  there  are  two  backorders,  but  so  long  as  unavavailability  Is  low, 
even  the  infinite  source  calculation  expects  little  chance  of  greater  than 
2 backorders.  Under  warm  standby  chances  of  the  2 backorders  needed  to 
cause  system  unavailability  are  greatly  reduced  In  the  finite  source  model 
by  the  halving  of  the  demand  rate  once  there  is  one  backorder.  The  infinite 
source  approximation  does  not  capture  this  effect.  Its  estimate  of  expected 
backorders  are  not  bad  because  this  value  is  dominated  by  the  probability 
of  1 backorder,  l.e.  two  backorders  occurs  relatively  infrequently. 


22 


Unavailabilities 


X Cold  Standby  Warm  Standby 


8-0 

8-1 

8-0 

8-1 

010 

.0052 

.000 

.010 

.000 

021 

.0212 

.000 

.041 

.001 

043 

.0892 

.001 

.170 

.005 

089 

.3642 

.011 

.670 

.040 

185 

1.422 

.088 

2.43 

.292 

383 

5.042 

.640 

7.68 

1.79 

795 

15.02 

3.82 

19.6 

8.00 

TABLE  1 


UNAVAILABILITIES 


Ratios  Unadjusted 


Ratios  Adjusted 


\ 

Cold  Standby 

Warm  Standby 

Cold  Standby 

Warm  Standby 

s-0 

8-1 

s-0 

s-1 

s-0 

s-1 

8-0 

s-1 

010 

1.00 

1.00 

2.01 

2.01 

1.00 

1.00 

1.97 

2.01 

021 

1.01 

1.01 

2.03 

2.02 

1.01 

1.00 

1.95 

2.02 

043 

1.01 

1.01 

2.05 

2.04 

1.01 

1.01 

1.89 

2.03 

089 

1.03 

1.02 

2.11 

2.09 

1.02 

1.01 

1.79 

2.05 

185 

1.06 

1.05 

2.20 

2.19 

1.04 

1.01 

1.63 

2.04 

383 

1.13 

1.10 

2.33 

2.39 

1.03 

.96 

1.39 

1.90 

795 

1.27 

1.22 

2.41 

2.68 

.985 

.82 

1.13 

1.37 

TABLE  2 

UNAVAILABILITY  RATES 


I 


fl 

Ratios  Unadjusted  Ratios  Adjusted 


X 

Cold  Standby 

Warm  Standby 

Cold  Standay 

Warm 

Standby 

8-0 

8-1 

8-0 

8-1 

8-0 

8—1 

s-0 

8-1 

010 

1.00 

1.00 

1.01 

1.01 

1.00 

1.00 

1.00 

1.01 

021 

1.00 

1.00 

1.02 

1.01 

1.00 

1.00 

1.00 

1.01 

043 

1.00 

1.00 

1.04 

1.03 

1.00 

1.00 

1.00 

1.03 

089 

1.00 

1.00 

1.09 

1.06 

1.00 

.99 

1.00 

1.05 

185 

1.01 

1.01 

1.18 

1.14 

1.00 

.98 

1.00 

1.08 

383 

1.05 

1.03 

1.38 

1.31 

1.00 

.94 

1.00 

1.12 

795 

1.18 

1.12 

1.79 

1.72 

1.00 

.84 

1.00 

1.12 

TABLE  3 

BACKORDER  RATIOS 
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Ratios  Unadjusted  Ratios  Adjusted 


X 

Cold  Standby 

Warn  Standby 

Cold  Standay 

Warm  Standby 

8-0 

s-1 

8-0 

B— 1 

8-0 

s-1 

s-0 

s-1 

010 

1.00 

1.00 

1.01 

1.01 

1.00 

1.00 

1.00 

1.01 

021 

1.00 

1.00 

1.02 

1.01 

1.00 

1.00 

1.00 

1.01 

043 

1.00 

1.00 

1.04 

1.03 

1.00 

1.00 

1.00 

1.03 

089 

1.00 

1.00 

1.09 

1.06 

1.00 

.99 

1.00 

1.05 

185 

1.01 

1.01 

1.18 

1.14 

1.00 

.98 

1.00 

1.08 

383 

1.05 

1.03 

1.38 

1.31 

1.00 

.94 

1.00 

1.12 

795 

1.18 

1.12 

1.79 

1.72 

1.00 

st- 

OO 

e 
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